An attacker crafts a message that appears to be from a trusted source, but in reality it redirects the
recipient to a malicious site where information is harvested. The message is narrowly tailored so it
is effective on only a small number of victims. This describes which of the following?

Verifying the integrity of data submitted to a computer program at or during run-time, with the
intent of preventing the malicious exploitation of unintentional effects in the structure of the code,
is BEST described as which of the following?

An administrator is instructed to disable IP-directed broadcasts on all routers in an organization.
Which of the following attacks does this prevent?

Ann, the system administrator, is installing an extremely critical system that can support ZERO
downtime. Which of the following BEST describes the type of system Ann is installing?

An administrator has to determine host operating systems on the network and has deployed a
transparent proxy. Which of the following fingerprint types would this solution use?

An organization has three divisions: Accounting, Sales, and Human Resources. Users in the
Accounting division require access to a server in the Sales division, but no users in the Human
Resources division should have access to resources in any other division, nor should any users in
the Sales division have access to resources in the Accounting division. Which of the following
network segmentation schemas would BEST meet this objective?

An organization’s security policy states that users must authenticate using something you do.
Which of the following would meet the objectives of the security policy?

Which of the following protocols is MOST likely to be leveraged by users who need additional
information about another user?

An internal audit has detected that a number of archived tapes are missing from secured storage.
There was no recent need for restoration of data from the missing tapes. The location is monitored
by access control and CCTV systems. Review of the CCTV system indicates that it has not been
recording for three months. The access control system shows numerous valid entries into the
storage location during that time. The last audit was six months ago and the tapes were accounted
for at that time. Which of the following could have aided the investigation?

A systems engineer has been presented with storage performance and redundancy requirements
for a new system to be built for the company. The storage solution must be designed to support
the highest performance and must also be able to support more than one drive failure. Which of
the following should the engineer choose to meet these requirements?